Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A6hEn1ZVU4nCZQEMzq1FnZmy7einPyALGTgjrS8ympiL/0/3138372e34392e32392e302f32342d3234203d3e203238313339.roa
File:                     3138372e34392e32392e302f32342d3234203d3e203238313339.roa (raw, json)
Hash identifier:          c/Rvi/tYylwaEQQJtu5g9JMLJ6LhOLocXarI74oyOzM=
Subject key identifier:   02:9B:4E:0A:FD:BC:8B:57:D5:F3:92:AE:11:58:27:59:5E:D7:A7:D3
Certificate issuer:       /CN=FD6C82072A7D65129B2FD29C80AD0A70771EF91F
Certificate serial:       46603672E7F7A566FF1B8A51746978971037CF2E
Authority key identifier: FD:6C:82:07:2A:7D:65:12:9B:2F:D2:9C:80:AD:0A:70:77:1E:F9:1F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FD6C82072A7D65129B2FD29C80AD0A70771EF91F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A6hEn1ZVU4nCZQEMzq1FnZmy7einPyALGTgjrS8ympiL/0/3138372e34392e32392e302f32342d3234203d3e203238313339.roa
Signing time:             Mon 31 Jul 2023 18:15:52 +0000
ROA not before:           Mon 31 Jul 2023 18:10:52 +0000
ROA not after:            Mon 29 Jul 2024 18:15:52 +0000
asID:                     28139
IP address blocks:        187.49.29.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:60:36:72:e7:f7:a5:66:ff:1b:8a:51:74:69:78:97:10:37:cf:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FD6C82072A7D65129B2FD29C80AD0A70771EF91F
        Validity
            Not Before: Jul 31 18:10:52 2023 GMT
            Not After : Jul 29 18:15:52 2024 GMT
        Subject: CN=029B4E0AFDBC8B57D5F392AE115827595ED7A7D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:6b:1f:a6:40:1b:85:c1:f6:19:e4:b4:86:57:
                    6d:b0:78:8a:ea:8b:1a:a1:87:cf:ce:27:8a:13:6b:
                    a3:60:75:ac:3a:41:b0:f8:3b:65:d1:56:87:ae:90:
                    3e:4b:55:6e:81:b0:97:9c:1e:ab:5a:c7:58:4f:05:
                    84:51:5f:f4:f0:2a:85:e7:5f:e7:bd:b2:e9:8e:6a:
                    74:3e:1d:e3:ed:a7:a9:e6:77:75:72:fb:e6:58:2c:
                    89:ff:c2:9c:e7:a5:80:a8:94:92:2f:6c:1c:98:a8:
                    37:c7:11:5d:70:ad:79:1b:4a:1b:60:25:74:0c:09:
                    95:e6:ab:9b:9d:9b:ea:32:01:43:c6:47:48:b3:5d:
                    ce:d7:e8:81:e1:bd:67:4b:10:c4:e3:12:3a:e5:85:
                    ab:80:1b:2d:6f:6a:a6:44:b9:25:8e:14:c7:a1:a1:
                    3d:cc:3c:56:37:b5:5f:f7:7c:0b:52:a8:81:17:90:
                    a1:61:09:38:39:c5:ab:87:55:5c:72:dc:f9:cc:9b:
                    2f:ff:02:12:00:dd:37:46:02:4d:47:97:6a:20:80:
                    4d:bf:e6:22:a5:4b:f2:31:f9:db:8d:2a:69:fe:cf:
                    21:7f:bc:79:48:2b:dc:5a:41:1f:3c:bc:a9:21:45:
                    ea:8b:89:65:e3:45:a8:17:2a:5b:fd:14:95:7d:4b:
                    b9:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:9B:4E:0A:FD:BC:8B:57:D5:F3:92:AE:11:58:27:59:5E:D7:A7:D3
            X509v3 Authority Key Identifier:
                keyid:FD:6C:82:07:2A:7D:65:12:9B:2F:D2:9C:80:AD:0A:70:77:1E:F9:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A6hEn1ZVU4nCZQEMzq1FnZmy7einPyALGTgjrS8ympiL/0/FD6C82072A7D65129B2FD29C80AD0A70771EF91F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FD6C82072A7D65129B2FD29C80AD0A70771EF91F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A6hEn1ZVU4nCZQEMzq1FnZmy7einPyALGTgjrS8ympiL/0/3138372e34392e32392e302f32342d3234203d3e203238313339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.49.29.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:86:80:50:ad:de:fc:28:f4:cc:0c:cf:2a:fe:09:1d:8c:a5:
         36:45:c4:fe:f6:56:71:d5:62:85:1e:40:ba:25:6b:c1:3c:bb:
         55:77:4c:93:bb:40:3b:67:31:f8:af:ae:0b:7d:29:f2:54:a7:
         a0:99:7f:45:71:5f:a4:13:b1:d6:93:ce:1a:82:a4:29:16:99:
         f9:e4:88:3d:29:fc:e7:fe:74:2d:51:6c:3b:ed:d9:96:33:78:
         d7:88:43:1f:73:99:6c:f1:75:27:b2:e8:02:cb:e4:f0:a8:75:
         ac:d5:c3:fd:ce:14:f0:06:5e:dd:55:a1:20:d4:ee:89:61:b0:
         a4:77:ee:50:b5:3a:ca:3a:25:23:18:b9:1c:84:3b:b7:74:a0:
         38:27:12:b2:bd:35:25:75:31:69:08:39:f9:80:2d:11:0f:ef:
         ee:52:70:5f:75:b9:e0:b7:b2:fe:98:06:a0:23:01:b2:3c:93:
         0b:0c:46:e3:65:81:82:bd:3b:8f:a0:90:d6:b6:86:9c:0b:90:
         f4:80:19:70:bc:86:82:01:41:13:96:9c:3a:04:4e:56:39:09:
         5e:0d:be:80:0f:b5:06:b8:b4:bb:5c:63:6b:b6:f2:48:64:93:
         82:06:bd:4b:30:22:1a:a6:4d:b0:ef:97:3b:5c:ba:4a:60:43:
         37:01:fd:e9
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIURmA2cuf3pWb/G4pRdGl4lxA3zy4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkQ2QzgyMDcyQTdENjUxMjlCMkZEMjlDODBBRDBBNzA3
NzFFRjkxRjAeFw0yMzA3MzExODEwNTJaFw0yNDA3MjkxODE1NTJaMDMxMTAvBgNV
BAMTKDAyOUI0RTBBRkRCQzhCNTdENUYzOTJBRTExNTgyNzU5NUVEN0E3RDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLax+mQBuFwfYZ5LSGV22weIrq
ixqhh8/OJ4oTa6Ngdaw6QbD4O2XRVoeukD5LVW6BsJecHqtax1hPBYRRX/TwKoXn
X+e9sumOanQ+HePtp6nmd3Vy++ZYLIn/wpznpYColJIvbByYqDfHEV1wrXkbShtg
JXQMCZXmq5udm+oyAUPGR0izXc7X6IHhvWdLEMTjEjrlhauAGy1vaqZEuSWOFMeh
oT3MPFY3tV/3fAtSqIEXkKFhCTg5xauHVVxy3PnMmy//AhIA3TdGAk1Hl2oggE2/
5iKlS/Ix+duNKmn+zyF/vHlIK9xaQR88vKkhReqLiWXjRagXKlv9FJV9S7m1AgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUAptOCv28i1fV85KuEVgnWV7Xp9MwHwYDVR0j
BBgwFoAU/WyCByp9ZRKbL9KcgK0KcHce+R8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQTZoRW4xWlZVNG5DWlFFTXpxMUZuWm15N2VpblB5QUxHVGdqclM4eW1w
aUwvMC9GRDZDODIwNzJBN0Q2NTEyOUIyRkQyOUM4MEFEMEE3MDc3MUVGOTFGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0ZENkM4MjA3MkE3RDY1MTI5
QjJGRDI5QzgwQUQwQTcwNzcxRUY5MUYuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0E2aEVuMVpWVTRuQ1pRRU16cTFGblpteTdlaW5QeUFMR1RnanJTOHltcGlMLzAv
MzEzODM3MmUzNDM5MmUzMjM5MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzODMx
MzMzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEALsxHTANBgkqhkiG9w0BAQsFAAOCAQEAToaAUK3e/Cj0
zAzPKv4JHYylNkXE/vZWcdVihR5AuiVrwTy7VXdMk7tAO2cx+K+uC30p8lSnoJl/
RXFfpBOx1pPOGoKkKRaZ+eSIPSn85/50LVFsO+3ZljN414hDH3OZbPF1J7LoAsvk
8Kh1rNXD/c4U8AZe3VWhINTuiWGwpHfuULU6yjolIxi5HIQ7t3SgOCcSsr01JXUx
aQg5+YAtEQ/v7lJwX3W54Ley/pgGoCMBsjyTCwxG42WBgr07j6CQ1raGnAuQ9IAZ
cLyGggFBE5acOgROVjkJXg2+gA+1Bri0u1xja7bySGSTgga9SzAiGqZNsO+XO1y6
SmBDNwH96Q==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:10 2024 by rpki-client on console-fra.rpki-client.org